probably something with my ISP that I can’t really easily work around

I’d try and find out if you’re behind a CG-NAT first, and whether you have IPv6 support. Some ISPs will turn off CG-NAT if you ask if that is the reason you haven’t been able to get things working. Wireguard will then work properly which is a bit kinder on battery life with mobile devices in particular compared to Tailscale and Netbird (although both are improving in that regard).

Maybe a used minipc like the Lenovo Tiny series, although it might be slightly exceeding your budget.

Vodafone/TPG now implements this too. It’s just shitty old Optus that’s stuck in the past.

Yeah, you’re stuck with NAT66 with most commercial VPNs that support IPv6. If you’ve got ISP level ipv6 you can still allow inbound connections directly at least.

If you do go the NAT66 route, consider assigning a fake GUA from an unassigned prefix as if you use standard ULAs outbound connections will always prefer ipv4.

None of this is in the spirit of proper ipv6 but it “works”.

I don’t normally use Jellyfin for music but I do like that some subsonic clients like supersonic are supporting Jellyfin as an alternative, so if navidrome breaks for some reason I can just change over quickly.

Navidrome will only open your library in read-only

Are you sure that’s not just the default in the example docker-compose.yml? If there isn’t some additional handling, you can just remove the “:ro” from:

volumes:
      - "/path/to/your/music/folder:/music:ro"

This sort of setup is a bit more advanced since it requires static routes on the remote router at least. Doable with one or two networks, but not if you have a bunch of users.

Most ISPs that do use CGNAT also offer ipv6 in Australia at least. The problem is that there is always that one client network that only supports ipv4 so you end up needing to support dual stack one way or another. Most of these ISPs also support CGNAT opt out for free at least, but I suspect that will go away in the medium term (and maybe that will encourage more universal ipv6 rollout).

It’s probably a TOS violation but you can combine it with pinchflat to strip ads and sponsored content from YouTube. It’s not a general YouTube app though, rather you use it to preserve channels you’re interested in.

You can also use Jellyfin to serve legally purchased music from bandcamp etc, or movies and TV shows ripped from Blurays and DVDs.